Freedesktop Poppler 安全漏洞

Freedesktop Poppler is a Freedesktop community C++ class library for generating PDFs, which is inherited from Xpdf PDF reader. A security vulnerability exists in Freedesktop Poppler version 24.12.0 and earlier versions, which stems from an out-of-bounds read vulnerability in libpoppler.so in the...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the JBIG2Bitmap::combine function, which can be exploited to cause a crash. This can be triggered by reading a malicious PDF file with pdfimages. Remediation Upgrade poppler to version 25.11.0 or higher. References...

PT-2024-36808 · Poppler +6 · Poppler +6

Name of the Vulnerable Software and Affected Versions: Poppler versions prior to 24.12.0 Description: The issue is an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc. This vulnerability occurs in the libpoppler.so file in Poppler. Recommendations: For...

CVE-2024-56378

libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc...

CVE-2024-56378

libpoppler.so in Poppler through 24.12.0 has an out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc...

CVE-2024-56378

CVE-2024-56378 is an out-of-bounds read in the Poppler library (libpoppler.so) affecting releases up to 24.12.0, due to a flaw in JBIG2Bitmap::combine in JBIG2Stream.cc. Connected sources confirm the issue in Poppler and note public fixes in at least Debian LTS (DLA-4141-1) for Debian 11, where v...

Xpdf integer overflow vulnerability (CNVD-2019-26664)

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. An integer overflow vulnerability exists in the JBIG2Bitmap::combine function in JBIG2Stream.cc in Xpdf 4.01.01. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2019-14288

An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case...

Integer overflow

An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case...

poppler/pdf_fuzzer: Use-of-uninitialized-value in JBIG2Bitmap::combine

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed report: https://oss-fuzz.com/testcase?key=5940249153765376 Project: poppler Fuzzer: libFuzzerpopplerpdffuzzer Fuzz targ...